Macintosh Resources @ CSE

Search CSE Support

Printing

Printing from a Macintosh desktop or laptop to a CSE printer now requires authentication prior to printing. Kerberos printing requires that you have an active Kerberos ticket on your desktop or laptop, and IPPS printing requires you to provide your Kerberos credentials when you print a document. The steps necessary to
set up printing on your desktop or laptop are similar, whichever method you choose, but the IPPS method is simpler to use.

Before You Start: Setting Up The Preference Pane

If you haven't set up a CSE printer on your Macintosh before, there's one task you must accomplish: the "Printers and Scanners" System Preference pane needs the "Advanced" icon (it looks like a gear) available for you to use. Follow this sequence of instructions to make it happen:

Open the "System Preferences" application, and select "Printers and Scanners."

Select the "+" icon at the bottom of the "Printers" list on the left side of this pane. The "Add" window appears.

Right-click just to the left of the "Search" box, and select "Customize Toolbar." An empty box appears in the toolbar (near where you just right-clicked).

Drag the "Advanced" icon - the gear - from the list of "...favorite items..." into that empty box, and select "Done."

Before You Start: If You've Been Around For A While...

If the local account name on your Macintosh doesn't match your CSE username, and you'd previously added "User cseusername" to one or both of these files on your Macintosh: /etc/cups/client.conf or ~/.cups/client.conf, you must remove that "User cseusername" command before attempting to print with either of the printing methods described here.

[+] IPPS printing (wireless AND wired)

[-] IPPS printing (wireless AND wired)

This printing method can be used for both wired and wireless connections.

Setup

You only need to do this part once, regardless of the number of printers you wish to set up.

Download three files - two printer description files, and one which assists in the printing process.In a Terminal window, type the following commands:cdscp username@attu.cs.washington.edu:/cse/lab/sw/MacOS/'*' .
which will put the files "cse-ps.ppd," "cse-psc.ppd," and "kipps" in your Macintosh home directory. Replace "username" with your CSE username in the "scp" command, and enter your Kerberos password when asked.

The "kipps" file - which assists in the printing process - needs to be in a specific folder and have specific ownership and permission. These three commands will take care of all of that:sudo cp -p kipps /usr/libexec/cups/backendsudo chown root /usr/libexec/cups/backend/kippssudo chmod 700 /usr/libexec/cups/backend/kipps
The "sudo" command will ask for your Macintosh account password, and enables you to do things as root.

If you'd prefer, download this script, and run it in a Terminal window with this command: bash ./kps.sh to automate those steps.

Adding a Printer

You'll need to do this once for each printer you want to set up.

Open the "System Preferences" application, and select "Printers and Scanners."

Select the "+" icon at the bottom of the "Printers" list on the left side of this pane. The "Add" window appears.

Select the "Advanced" (gear) icon from the toolbar in this window. (No gear? Follow the directions in "Before You Start: Setting Up The Preference Pane.")

In the "Type:" field, select "Internet Printing Protocol (ipps)."

Leave the "Device:" field alone.

In the "URL:" field, complete the URL: "ipps://macps.cs.washington.edu/printers/PRINTERNAME" where "PRINTERNAME" is the name of a CSE printer, like "psc381" or "ps002."

In the "Name:" field, type in the name of the printer - "psc381" or "ps002," for example.

In the "Location:" field, type in the location of the printer - "CS 381" or "CS 002," for example.

In the "Use:" field, select "Other..." from the option menu, and find one of the files you downloaded earlier. "cse-ps.ppd" is for black and white printers, and "cse-psc.ppd" is for color printers.

Select the "Add" button.

Printing

When you print to a device set up with this method, you will see a dialog box after selecting the "Print" button from the application in which you are printing. Enter your CSE username and password into the dialog box. You may choose to save your CSE username and password in your keychain, by checking the appropriate box. If you do that, you will not be asked for your CSE username and password when you print.

The very first print job you send to a newly-added printer will likely be "held for authentication" even though you've done everything correctly. Cancel that print job, and submit it again, and you should be successful.

[+] Kerberos printing (wireless)

[-] Kerberos printing (wireless)

This printing method can be used if you connect to a wireless network.

Setup

You only need to do this part once, regardless of the number of printers you wish to set up.

Use the "Ticket Viewer" app, or the "kinit user@CS.WASHINGTON.EDU" command in a Terminal window to get a Kerberos ticket.

Download three files - two printer description files, and one which assists in the Kerberos printing process.In a Terminal window, type the following commands:cdscp username@attu.cs.washington.edu:/cse/lab/sw/MacOS/'*' .
which will put the files "cse-ps.ppd," "cse-psc.ppd," and "kipps" in your Macintosh home directory. Replace "username" with your CSE username in the "scp" command, and enter your Kerberos password when asked.

The "kipps" file - which assists in the printing process - needs to be in a specific folder and have specific ownership and permission. These three commands will take care of all of that:sudo cp -p kipps /usr/libexec/cups/backendsudo chown root /usr/libexec/cups/backend/kippssudo chmod 700 /usr/libexec/cups/backend/kipps
The "sudo" command will ask for your Macintosh account password, and enables you to do things as root.

Adding a Printer

You'll need to do this once for each printer you want to set up.

Open the "System Preferences" application, and select "Printers and Scanners."

Select the "+" icon at the bottom of the "Printers" list on the left side of this pane. The "Add" window appears.

Select the "Advanced" (gear) icon from the toolbar in this window. (No gear? Follow the directions in "Before You Start: Setting Up The Preference Pane.")

In the "Type:" field, select "Internet Printing Protocol (kipps)."

Leave the "Device:" field alone.

In the "URL:" field, complete the URL: "kipps://kups.cs.washington.edu/printers/PRINTERNAME" where "PRINTERNAME" is the name of a CSE printer, like "psc381" or "ps002."

In the "Name:" field, type in the name of the printer - "psc381" or "ps002," for example.

In the "Location:" field, type in the location of the printer - "CS 381" or "CS 002," for example.

In the "Use:" field, select "Other..." from the option menu, and find one of the files you downloaded earlier. "cse-ps.ppd" is for black and white printers, and "cse-psc.ppd" is for color printers.

Select the "Add" button and, if the printer has any specific options, such as duplex printing, take care of that here.

At this point, you will need to log out and back in, and get a new Kerberos ticket.

Printing

When you print to a device set up with this method, you will see a dialog box after selecting the "Print" button from the application in which you are printing. Your CSE username will be in the "username" field. Type a random string into the password field. Do not type in your Kerberos password. If you do, please delete and reinstall this printer on your computer.

The very first print job you send to a newly-added printer will likely be "held for authentication" even though you've done everything correctly. Cancel that print job, and submit it again, and you should be successful.

[+] Kerberos printing (wired)

[-] Kerberos printing (wired)

This printing method can be used if your Macintosh has a wired (not wireless) network connection.

Setup

You only need to do this part once, regardless of the number of printers you wish to set up.

Use the "Ticket Viewer" app, or the "kinit user@CS.WASHINGTON.EDU" command in a Terminal window to get a Kerberos ticket.

Download two printer description files.In a Terminal window, type the following commands:cdscp username@attu.cs.washington.edu:/cse/lab/sw/MacOS/'*' .
which will put the files "cse-ps.ppd," and "cse-psc.ppd" in your Macintosh home directory. Replace "username" with your CSE username in the "scp" command, and enter your Kerberos password when asked.

Adding a Printer

You'll need to do this once for each printer you want to set up.

Open the "System Preferences" application, and select "Printers and Scanners."

Select the "+" icon at the bottom of the "Printers" list on the left side of this pane. The "Add" window appears.

Select the "Advanced" (gear) icon from the toolbar in this window. (No gear? Follow the directions in "Before You Start: Setting Up The Preference Pane.")

In the "Type:" field, select "Internet Printing Protocol (ipps)."

Leave the "Device:" field alone.

In the "URL:" field, complete the URL: "ipps://rups.cs.washington.edu/printers/PRINTERNAME" where "PRINTERNAME" is the name of a CSE printer, like "psc381" or "ps002."

In the "Name:" field, type in the name of the printer - "psc381" or "ps002," for example.

In the "Location:" field, type in the location of the printer - "CS 381" or "CS 002," for example.

In the "Use:" field, select "Other..." from the option menu, and find one of the files you downloaded earlier. "cse-ps.ppd" is for black and white printers, and "cse-psc.ppd" is for color printers.

Select the "Add" button and, if the printer has any specific options, such as duplex printing, take care of that here.

At this point, you need to log out and back in, and get a new Kerberos ticket.

Printing

When you print to a device set up with this method, you will encounter no interstitial dialogs.

The very first print job you send to a newly-added printer will likely be "held for authentication" even though you've done everything correctly. Cancel that print job, and submit it again, and you should be successful.

In the print dialog, in "Page Sizing & Handling," select the "Actual Size" radio button for an accurately-sized print of your poster. (The preview image on the right will update when the custom paper size is defined and when either the "Fit" or "Actual Size" radio buttons are selected.)

Preview

In the print dialog, select "Manage Custom Sizes" from the "Paper Size:" option menu, and create a new custom paper size that is 36 inches wide by 60 inches tall.

In the "Preview," pane, select the "Scale:" radio button and set the scale to 100%, and set the "Paper Size:" to the new custom paper size.

Printing Preferences: Banner Pages and Duplex Printing

Remote Access

Connection to a Linux Host

Use the Macintosh "Terminal" application, and use the "ssh" command with your Kerberos credentials:

ssh -Y hostname.cs.washington.edu

The "-Y" ensures X11-forwarding; with the proper X11 software installed on your Macintosh - see this resource - you can redirect the GUI from a Linux program to your Macintosh.

Connection to a Windows Host

The "Husky OnNet" VPN service is now required for connection to on-campus resources, when connecting from off-campus locations. Detailed information about this service can be found on the UW IT Connect pages, or you may choose to proceed directly to the Husky OnNet download page. (Accessing this link requires UWNetID authentication.)

To install the software, download and unpack the "ZIP" file, and run the "mac_edgesvn.pkg" installer.

To use the software, start the "BIG-IP Edge Client" program, found in your Applications folder, and authenticate with your UWNetID credentials. Once connected, you can use Microsoft Remote Desktop (see below) to connect to on-campus resources, with no additional gateway configuration necessary.

Use the Microsoft Remote Desktop Connection application, available for free from the App Store. Please note, the version of RDC that comes with Office 2011 is obsolete; the version available from the App Store includes modern encryption protocols necessary for connecting to our Windows resources. Use your CSENETID credentials.

Network File Access

There are several ways of accessing networked file shares on your Macintosh. These methods assume that your Macintosh is connected to the department's network; i.e., you're not working from home or some remote location.

Mounting a Remote Directory with "Samba"

Your departmental home directory, or project directory, can be mounted temporarily or permanently on your Macintosh via Samba, by following these directions.

Mounting a Remote Directory with "sshfs"

Create the mountpoint: mkdir MOUNTPOINT. ("csehome" is a good example.)

Determine the host to which you should connect. For example, if you would like to mount your CSE home directory, connect to a CSE Linux host and run this command: "df | grep USERNAME" and the result will tell you the host and the path to your home directory -- "cash:/homes/gws/bradley" might be the result. Make sure to add ".cs.washington.edu" to the hostname in the next command.

Mount the remote directory by typing the following command all on one line: sshfs -p 22 username@host:/path/to/remote/directory MOUNTPOINT -oauto_cache,reconnect,defer_permissions,negative_vncache,volname=MOUNTPOINT

You'll be asked for your password - this would be your Kerberos password.

MOUNTPOINT is now the mount point for that remote directory.

Security

If you've been issued a Macintosh laptop, by the department or your research group, we strongly recommend that you take the steps necessary to enable the "Find My Mac" service. There's an Apple Support document which goes into great detail on this topic, but the "quick start" overview is: